Static task
static1
Behavioral task
behavioral1
Sample
b2b78a282cd6ce9e7766d30cd91c276b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2b78a282cd6ce9e7766d30cd91c276b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2b78a282cd6ce9e7766d30cd91c276b_JaffaCakes118
-
Size
183KB
-
MD5
b2b78a282cd6ce9e7766d30cd91c276b
-
SHA1
41bee09c1fdf792bc80c144ace89e8569273fdbf
-
SHA256
58fd7e4eccb8ff3fa5dfbfa14a8377dd1af7397561d4b7cc7ddbddc4a7245900
-
SHA512
6ee50cbb66ba1c9b31f9c9c7c9fe01bea2d77b538181deb61b035c7a311e4c651b622f3e8a610e962c25e04ed7d74dfecd01f4a4c9d54bd5c9a598ca5416ba9f
-
SSDEEP
3072:qIP+Cm9cwddBq0F7KDJCZ1ajnCVqzVXND/EA0fZ+6vick6dGNZBJ:qzClyXKgQCV+VXND8L+CAN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2b78a282cd6ce9e7766d30cd91c276b_JaffaCakes118
Files
-
b2b78a282cd6ce9e7766d30cd91c276b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b11c00d9d35a2330db5af17f35fa025e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageWidth
GdipDisposeImage
shlwapi
PathIsUNCW
StrDupW
PathSkipRootW
PathGetArgsW
SHRegGetValueW
PathFindFileNameW
kernel32
GetCalendarInfoW
GetCurrentThreadId
GetCurrentDirectoryW
OutputDebugStringW
lstrlenW
GetFileAttributesW
SetLastError
ExitProcess
LocalFree
GetProcAddress
SetEnvironmentVariableW
MultiByteToWideChar
VirtualProtect
lstrcmpiW
GetModuleHandleW
VirtualQuery
LocalAlloc
SearchPathW
GetCurrentProcess
EnumResourceNamesA
InitializeCriticalSection
WideCharToMultiByte
CreateDirectoryW
InterlockedExchange
OutputDebugStringA
GetLastError
GetModuleFileNameW
DuplicateHandle
GetFileInformationByHandle
GetProcessId
FreeLibrary
GetModuleHandleA
Sleep
ole32
CoGetDefaultContext
CoInitialize
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ